Details
H3C MSR1000 router series
As SDN, cloud computing, and AI technologies bring revolutionized changes to the networking landscape, a growing number of enterprises are driving digital business transformation, which requires enterprise WANs to provide the following capabilities:- AD-WAN capacity—Provides visibility into link quality and business traffic on the WAN, and allows management, control, and scheduling of business traffic, and enables good use experience with enterprise businesses.
- Higher network performance—Increased complexity of traffic models driven by development of enterprise businesses requires more converged and diversified network services. Network devices must provide higher forwarding capacity to align with the growing needs.
- Simple, automated network management—Simplifies network device management and maintenance, improves efficiency, and reduces management costs.
To embrace these opportunities and challenges, H3C has developed new-generation MSR1000 router series based on ten years of experience in enterprise and carrier network construction and profound technology accumulation. The router delivers the following features:
- Provides rich access capabilities including 5G/FDD/TDD-LTE, Wi-Fi6, and Ethernet, meeting various access requirements at the branch site from a single device.
- Supports a full range of AD-WAN features including SR/SRv6, OpenFlow, telemetry, NETCONF, and zero-touch provisioning (ZTP) and can work in conjunction with H3C AD-WAN controllers to deliver extraordinary AD-WAN management and use experience.
- Integrated with H3C IMC and Cloudnet, the router can provide centralized management and monitoring of devices, bulk software upgrade, automated configuration deployment, configuration rollback, and fault alarming, improving O & M efficiency and reducing the TCO significantly.
- Employs rich VPN interconnect technologies, including IPsec, L2TP, and ADVPN and robust encryption algorithms to provide secure VPN access in various scenarios.
- Identifies over 1000 common PC and mobile phone applications and offers granular control for application traffic.
- Logs detailed information about user online behaviors to meet wireless non-economic audit requirements.
Full support for SDN
The router supports a full range of SDN features, including:Flexible management—Supports management and control protocols such as OpenFlow, Telemetry, and NETCONF and allows management from H3C AD-WAN or third-party controllers.
Powerful forwarding capability—Supports advanced forwarding and routing technologies such as segment routing, VXLAN, and EVPN and allows customization of multiple forwarding models to adapt to different business requirements.
ZTP—Supports ZTP through URL, USB drive, and DHCP to enable fast, bulk, and low-cost deployment.
DPI—Provides precise traffic identification and enables traffic visibility, customization, and flexible orchestration.
SRv6—Supports EVPN L2VPN over SRv6 policy/BE and EVPN L3VPN over SRv6 policy/BE networking.
Features:
Online behavior management and audit
Granular application identification and control—Provides the capability to identify, filter, and rate limit over 1000 common PC and mobile phone applications such as IM applications, streaming media applications, stock and financing applications, game applications, and P2P applications.URL filtering—Allows you to use a website allowlist and denylist that support fuzzy matching to ensure access to secure websites.
Online behavior audit—Logs detailed information, including source IP addresses, timestamps, destination domain names, and URLs, about users' internet access behaviors, to meet wireless non-economic audit requirements.
High security
The router employs the following advanced features to ensure high security:Rich security rules—Supports filtering rules based on 5-tuple, ASPF state, MAC address and URL, domain-based firewall rules, and IPS rules.
Diversified VPN technologies—Supports IPsec, L2TP, GRE, ADVPN, MPLS VPN, and combination of multiple VPN technologies.
Endpoint access security—Provides strict access control for endpoints through 802.1X/portal authentication, endpoint admission defense (EAD) solution, and endpoint MAC address authentication.
DDoS attack protection—Guards against SYN, ACK, RST, and UDP flood attacks.
Secure device management—Provides flexible and secure control of permissions by managing permissions based on roles, assigning resources based on roles, and mapping users to roles.
Traffic control on the control plane—Allows customization of protocol messages for traffic control and filtering.
Robust firewall functionalities—Provides packet filtering firewall, stateful firewall, and security-zone based firewall functionalities.
5G/4G wireless communications
The router provides the following features to support 5G/4G wireless communications:Built with high speed, stable 5G/4G interfaces to support TDD/FDD 4G LTE networks of all carriers.
SIM/USIM binding with devices.
GPS.
Device deployment, management, and maintenance through SMS.
Intelligent network management
The router supports multiple network management methods, including Telnet/SSH, SNMP, TR069, and NETCONF.With EAA, the router allows you to define monitor policies with Tcl and Python scripts to monitor the internal events and status of the system's software and hardware components and execute the pre-defined actions in response to specific events automatically.
Hardware specifications:
Item |
Specifications |
|||
MSR1004S-5G-GL |
MSR1104S-W |
MSR1104S-W-CAT6 |
MSR1008 |
|
Forwarding Performance In Service (IMIX) |
1 Gbps |
1 Gbps |
1 Gbps |
4 Gbps |
Memory |
1 GB |
1 GB |
1 GB |
2 GB |
Flash |
512 MB |
256 MB |
256 MB |
4 GB |
Console port |
1 |
1 |
1 |
1 |
USB 2.0 port |
1 |
1 |
1 |
1 |
WAN Ethernet port |
1 × GE copper port 2 × GE fiber ports |
1 × GE copper port 1 × GE fiber port |
1 × GE copper port 1 × GE fiber port |
2 × 10GE SFP+ ports 2 × GE combo interfaces |
LAN Ethernet port |
4 × GE copper ports |
4 × GE copper ports |
4 × GE copper ports |
8 × GE copper ports (Four of them can be switched to routing mode.) |
5G/4G |
5G NR SA/NSA: n1/n2/n3/n5/n7/n8/n12/n20/n25/ n28/n38/n40/n41/n48*/n66/n71/ n77/n78/n79 LTE FDD: B1/B2/B3/B4/B5/B7/B8/B12(B17)/ B13/B14/B18/B19/B20/B25/B26/B28/ B29/B30/B32/B66/B71 LTE-TDD: B34/B38/B39/B40/B41/B42/B43/B48 LAA: B46 WCDMA: B1/B2/B3/B4/B5/B6/B8/B19 |
N/A |
TDD LTE: B38/B40/B41* FDD LTE: B1/B3/B5/B7/B8/B20/B28/B32 WCDMA: B1/B3/B5*/B8 CA: B1+B3/B8, B3+B1/B8, B38+B38
|
N/A |
5G/4G antenna |
4 |
N/A |
2 |
N/A |
SIM cards |
2 |
N/A |
2 |
N/A |
Wi-Fi |
N/A |
802.11ax/n/b/g: 2.4 GHz 2*2 MIMO 575 Mbps 802.11ax/ac/a/n: 5G 2*2 MIMO 2400 Mbps |
802.11ax/n/b/g: 2.4 GHz 2*2 MIMO 575 Mbps 802.11ax/ac/a/n: 5G 2*2 MIMO 2400 Mbps |
N/A |
Wi-Fi antenna |
N/A |
2 |
2 |
N/A |
Dying gasp |
Supported |
N/A |
N/A |
N/A |
Max power consumption |
24 W |
18 W |
24 W |
36 W |
Power supply |
External power adapter 100 to 240 V, 50/60 Hz |
External power adapter 100 to 240 V, 50/60 Hz |
External power adapter 100 to 240 V, 50/60 Hz |
Internal power adapter 100 to 240 V, 50/60 Hz |
Dimensions (H × W × D) |
52.4 × 150 × 127 mm (2.06 × 5.91 × 5 in) |
43.6 × 266 × 161 mm (1.72 × 10.47 × 6.34 in) |
43.6 × 266 × 161 mm (1.72 × 10.47 × 6.34 in) |
43.6 × 266 × 161 mm (1.72 × 10.47 × 6.34 in) |
Operating temperature |
0°C~55℃ |
0°C to 45°C |
0°C to 45°C |
0°C to 45°C |
Ambient relative temperature |
5 % to 95%, noncondensing |
5 % to 95%, noncondensing |
5 % to 95%, noncondensing |
5 % to 95%, noncondensing |
Software specifications:
Item |
Specifications |
Layer 2 switching |
Ethernet, Ethernet II, VLAN, 802.3x, 802.1p, 802.1q, 802.1X, STP (802.1D), RSTP (802.1w), MSTP (802.1s), PPP, PPPoE client, PPPoE server |
IP services |
TCP, UDP, IP option, IP unnumbered Policy-based routing, NetStream, sFlow ECMP UCMP |
IP applications |
Ping, Tracert, ICMP, DHCP server, DHCP relay, DHCP client, DNS client, DNS proxy, DDNS, UDP Helper, NTP, SNTP |
IPv4 routing |
Static routing Dynamic routing: RIPv1/v2, OSPFv2, BGP, IS-IS Route iteration Routing policy Multicast routing protocols: IGMPv1/v2/v3, PIM-DM, PIM-SM, MBGP, MSDP |
IPv6 |
IPv6 ND, IPv6 PMTU, IPv6 FIB, IPv6 ACL, NAT-PT, 6PE, DS-LITE IPv6 tunnel: manually configured IPv6 tunnel, automatic IPv6 tunnel, GRE tunnel, 6to4 tunnel, ISATAP tunnel Static routing Dynamic routing protocols: RIPng, OSPFv3, IS-ISv6, BGP4+ IPv6 multicast protocols: MLDv1/v2, PIM-DM, PIM-SM |
QoS |
LR, port-based mirroring, priority trust mode on a port, and port priority Committed access rate (CAR) FIFO, WFQ, CBQ Generic Traffic Shaping (GTS) Traffic classification |
5G/4G |
5G NR, TDD/FDD LTE, WCDMA/HSPA+ |
Security |
Portal, 802.1X Local authentication, RBAC authentication, RADIUS authentication, TACACS+ authentication ASPF, ACL, filter, security zone-based firewall, connection limit, IPS IKE/IPsec VPN, ADVPN, GDVPN, L2TP VPN, GRE VPN NAT/NAPT, PKI, RSA, URPF DDoS attack prevention, ARP attack prevention, URL filtering EAD DPI SM2, SM3, SM4 encryption algorithms |
SDN |
NETCONF, OpenFlow, telemetry VXLAN, EVPN Segment routing ZTP through USB drive, URL, and DHCP SRv6: OSPFv3 for SRv6 IS-IS for SRv6 SRv6 policy SRv6 policy-based traffic steering EVPN L3VPN over SRv6 EVPN L3VPN over SRv6 policy SRv6 policy-based traffic statistics SRv6 OAM BFD for SRv6 SRv6 TI-LFA |
MPLS |
LDP, Static LSP L3VPN: Inter-domain MPLS VPN (Option1/2/3), nested MPLS VPN, hierarchy PE (HoPE), CE dual homing, MCE, and multi-role host L2VPN: Martini, Kompella, CCC and SVC MPLS TE, RSVP TE |
High availability |
VRRP, VRRPv3 Multi-link load balancing and backup Network quality analyzer (NQA), supporting collaboration with routing, VRRP, and interface backup |
Management and maintenance |
SNMP v1/v2c/v3, TR069, syslog, RMON Telnet, SSHv1.5/2.0, FTP EAA CLI management, file system management, dual image NQA DHCP test, NQA FTP test, NQA HTTP test, NQA ICMP test, NQA UDP public test, NQA UDP private test, NQA TCP public test, NQA TCP private test, and NQA SNMP test |
View more about H3C MSR1000 on main site